• info
• discussion
• exploit
• solution
• references

Edior CMS 'search.php' Directory Traversal Vulnerability

Edior CMS is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input data.

Exploiting this issue allows an attacker to access arbitrary files outside of the application's document root directory. This can expose sensitive information that could help the attacker launch further attacks.

Edior CMS 3.0 is vulnerable; other versions may also be affected.